01.01.12

PostgreSQL 9 bytea_output and CGI::Session

Posted in Servers at 9:53 pm by jgraham

PostgreSQL 9 introduces a new bytea output format, hex. This new format can cause problems for programs expecting the traditional output format.

Read the rest of this entry »

08.19.10

OS X DirectoryService UUID case sensitivity

Posted in Servers at 10:42 am by jgraham

I recently ran into an issue where some new users with LDAP based accounts did not see any CUPS shared printers.
The solution turned out to be case sensitivity of the apple-generateduid attribute.

Read the rest of this entry »

07.15.08

Checking for DNS Poisoning Vulnerability

Posted in Servers at 11:45 am by jgraham

Just a quick way to test and see if your DNS servers are vulnerable to the latest DNS Cache Poisoning vulnerability (CVE-2008-1447).

From: https://www.dns-oarc.net/oarc/services/porttest

$ dig @4.2.2.3 +short porttest.dns-oarc.net TXT

Replacing 4.2.2.3 with the IP address of your DNS server(s).

10.13.07

SSL Certificates with DNS Aliases

Posted in Servers at 8:33 am by jgraham

At work I have several systems that provide SSL encrypted services but respond to multiple host-names. For instance an LDAP server may be named server1.example.com but have DNS aliases of ldap-1.example.com and directory.example.com. If a client system connects to ldap-1.example.com and the server returns an SSL certificate with a common name of server1.example.com ugliness will ensue.

To get around this problem one can install SSL certificates that employ the subjectAltName extension.

Read the rest of this entry »